Trend Virus Report - June 2001 Issue # 2

************************************************************************
V I R U S R E P O R T
    
(by the Trend Micro US Virus Research Group)
************************************************************************
------------------------------------------------------------------------
Date: 06.08.2001 Issue Number: 06/02
------------------------------------------------------------------------
    
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/
  
If you're a corporate user and want to assess your virus protection,
check out Trend Micro's Virus Risk Assessment Web site at:
http://www.antivirus.com/free_tools/edoctor/
    
Issue Preview:
    
1. TREND MICRO UPDATES: Pattern File and Scan Engine Update
2. The Fairest of Them All -- TROJ_MSWORLD.A
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. Top 10 Viruses Trend Micro US Customers are Most Concerned About
5. Trend Micro ScanMail for Exchange is PC Magazine's Editors' Choice
  
NOTE: Long URLs may break into two lines in some mail readers.
Cut and paste, should this occur.
  
************************************************************************
    
1. TREND MICRO UPDATES: Scan Engine and Pattern File Updates
------------------------------------------------------------------------
PATTERN FILE: 899 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 5.400 http://www.antivirus.com/download/engines/
  
2. The Fairest of Them All -- TROJ_MSWORLD.A
------------------------------------------------------------------------
TROJ_MSWORLD.A sends itself via Microsoft Outlook to all addresses listed
in an infected user's address book. It disguises itself as a Flash movie file,
and arrives as an email attachment. A sample of the email is as follows:

Subject: Miss World
Message Body: Hi, [email recipient] Enjoy the latest pictures of Miss World
from various Country
Attachment: MWORLD.EXE, MISSWRLD.EXE., or MISSWORLD.EXE (varies)

Upon execution, it displays a series of pictures that are supposedly of Miss
World contestants. Upon the next bootup after infection, this Trojan displays a
message and reformats the infected user's C:\ and D:\ drives.

Trend Micro pattern file #898 and above detects and cleans TROJ_MSWORLD.A.
 
You can read more about TROJ_MSWORLD.A at the Trend Micro Web site
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MSWORLD.A

3. 10 Most Prevalent In-The-Wild Malware Surveyed by Trend Micro US
(week of: 05/28/2001 to 06/03/2001)
------------------------------------------------------------------------
1. TROJ_BADTRANS.A
2. PE_MAGISTR.A
3. VBS_HAPTIME.A
4. VBS_KAKWORM.A
5. TROJ_HYBRIS.B
6. TROJ_BYMER
7. JOKE_SCROLL.A
8. TROJ_MTX.A
9. PE_MTX.A
10. PE_MAGISTR.DAM
 
SPECIAL OFFER:
Webmasters, add free virus information updates to your Web site with our
Virus Info Feed. Simply copy and paste a small piece of code to give your
visitors a real-time top 10 list and the latest virus advisories.
Setup takes approximately 10 minutes and requires no server-side code on your
Web site. All content is updated automatically from Trend Micro's Web site.
http://www.antivirus.com/syndication/vinfo/default.asp?ref=nwsltr
  
4. Top 10 Viruses Trend Micro US Customers are Most Concerned About
   (where systems were not infected)
------------------------------------------------------------------------
1. PE_MAGISTR.A
2. VBS_KAKWORM.A
3. TROJ_BADTRANS.A
4. TROJ_SKA
5. PE_MAGISTR.DAM
6. TROJ_SKA.WSOCK32
7. TROJ_SKA.DLL
8. TROJ_MTX.A
9. TROJ_HYBRIS_P33
10. TROJ_HAKTEK
 
5. ScanMail for Exchange is PC Magazine's Editors' Choice
------------------------------------------------------------------------
If you are worried about email viruses, you need Trend Micro ScanMail for
Exchange. It is the best solution for your Exchange 2000 servers and PC Magazine
agrees: ScanMail and its plug-in eManager are PC Magazine's Editors' Choice for
Best Email Virus Protection. Download a FREE, 30-day trial copy of ScanMail and
find out why it is the best:
http://www.antivirus.com/banners/tracking.asp?si=63&bi=107&ul=/products/smex

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding viruses, please contact the Virus Doctor at
Virus_Doctor@trendmicro.com.
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Fri, 8 Jun 2001 11:08:12 -0700